CVE-2020-14807

CVE-2020-14807 affects Oracle Hospitality Suite8 WebConnect. It lists affected versions 8.10.2 and 8.11–8.14 and describes an unauthenticated, network-based vulnerability exploitable via HTTP that requires user interaction to trigger. Successful exploitation can lead to unauthorized access to cri...

CVE-2020-14814

CVE-2020-14814 (MySQL Server, Oracle MySQL) affects MySQL Server (component: Server: DML) with affected versions 8.0.21 and earlier. An attacker with network access via multiple protocols and with high privileges can cause a hang or a frequently repeatable crash (complete DoS) of MySQL Server. Ev...

CVE-2020-14799

CVE-2020-14799 is a vulnerability in the Oracle MySQL Server product (component: Server: Security: Encryption) affecting versions 8.0.20 and earlier. The issue allows a high-privileged attacker who has network access via multiple protocols to cause a hang or crash of MySQL Server, resulting in a ...

CVE-2020-14802

The CVE-2020-14802 entry concerns Oracle PeopleSoft Enterprise PeopleTools (PIA Core Technology) with affected versions 8.56–8.58. The issue is exploitable over HTTP with network access; exploitation requires user interaction and can lead to unauthorized update/insert/delete and read access to Pe...

CVE-2020-14817

Vulnerability in the Oracle Marketing product of Oracle E-Business Suite component: Marketing Administration. Supported versions that are affected are 12.1.1 - 12.1.3 and 12.2.3 - 12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

CVE-2020-14809

Removed by vendor...

CVE-2020-14804

Removed by vendor...

CVE-2020-14812

Removed by vendor...

CVE-2020-14800

Removed by vendor...

CVE-2020-14812

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Locking. Supported versions that are affected are 5.6.49 and prior, 5.7.31 and prior and 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

CVE-2020-14797

CVE-2020-14797 affects Oracle/OpenJDK Java SE Libraries (path validation) across multiple Java versions. Connected sources indicate this vulnerability residing in the Libraries component with affected OpenJDK packages such as java-1.8.0-openjdk and related ALAS/Amazon advisories, listing path val...

CVE-2020-14785

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

CVE-2020-14783

The CVE-2020-14783 entry concerns Oracle Hospitality RES 3700 (CAL component), affected in version 5.7. The vulnerability allows an unauthenticated, network-accessible attacker (TCP) to read a subset of data from the RES 3700. The underlying cause is described as a concern enabling unauthorized r...

CVE-2020-14780

Affected product: Oracle Fusion Middleware BI Publisher (BI Publisher Security) in Oracle BI Publisher/Oracle Analytics Server 5.5, 11.1.1.9.x, 12.2.1.3.x, 12.2.1.4.x. Root cause: unspecified in the summary, but the CVSS 3.1 base score is 7.1 with high confidentiality impact and low integrity imp...

CVE-2020-14784

Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware component: Mobile Service. Supported versions that are affected are 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracl...

CVE-2020-14787

Vulnerability in the Oracle Communications Diameter Signaling Router DSR product of Oracle Communications component: User Interface. Supported versions that are affected are 8.0.0.0-8.4.0.5. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2020-14781

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: JNDI. Supported versions that are affected are Java SE: 7u271, 8u261, 11.0.8 and 15; Java SE Embedded: 8u261. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2020-14781

CVE-2020-14781 affects Oracle Java SE/SE Embedded (JNDI) with affected versions including Java SE 7u271, 8u261, 11.0.8, 15 and Java SE Embedded 8u261. The vulnerability allows an unauthenticated attacker with network access via multiple protocols to read a subset of Java SE/SE Embedded data. The ...

CVE-2020-14789

CVE-2020-14789 affects Oracle MySQL Server (component: Server: FTS). Vulnerability details in connected advisories show it impacts MySQL 5.7.31 and prior and 8.0.21 and prior, with an attacker having network access via multiple protocols and high privileges able to cause a hang or crash (DoS) of ...

CVE-2020-14766

Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware component: Analytics Web Administration. Supported versions that are affected are 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows low privileged...